Sr. Manager, IT Security & Risk

Oceaneering; Houston (TX); Presencial; USD 140.000 - 210.000; Jornada completa

Descripción de la vacante

Oceaneering seeks a Senior Manager, Security & Controls to lead the delivery and strategic advancement of S&C for Oracle Fusion Cloud ERP and Costpoint ERP. You will oversee governance, access reviews, controls testing, and audit support, aligning security with business operations.

Reporting to the Sr. Director of Enterprise Applications, you will build a risk-based S&C capability, drive automation, manage staffing and budgets, and partner with IT, Compliance, Cybersecurity, Finance,

Formación

• Experience leading security & controls in large ERP environments.
• Strong knowledge of access governance, segregation of duties, and controls testing.
• Ability to partner with Cybersecurity, IT, Compliance, and Audit teams.

Responsabilidades

• Own end-to-end delivery of Security & Controls for Oracle Fusion Cloud ERP and Costpoint ERP.
• Define, publish, and monitor service levels for access requests and controls testing.
• Manage staffing, budget, priorities, risks, and delivery commitments for S&C.
• Ensure procedures, runbooks, and continuity plans are maintained.
• Set direction for security architecture, role design, and least privilege.
• Govern role catalogs, job-to-role mappings, and access certifications.
• Lead automation of access requests, approvals, and evidence generation.
• Coordinate with auditors and ensure complete, timely control evidence.
• Maintain license and consumption visibility across ERP platforms.
• Recruit and develop a high-performing S&C team and build stakeholder relationships.

Conocimientos

Security governance

Access governance

Role-based access control

Auditing

ERP security

Herramientas

Oracle Fusion Cloud ERP

Costpoint ERP

Identity and Access Management

Descripción del empleo

Overview

Oceaneering’s Enterprise Applications organization enables secure, reliable, and compliant business operations through enterprise platforms, governance, and support. The Security & Controls function partners with business process owners, Internal Audit, external auditors, Cybersecurity, Compliance, and IT delivery teams to manage application security, access governance, segregation of duties, controls, and audit readiness across the ERP landscape.

Position Summary

The Senior Manager, Security & Controls leads the day-to-day delivery and strategic advancement of Security & Controls for Oracle Fusion Cloud ERP and Costpoint ERP. Reporting to the Sr. Director – Enterprise Applications, this role is accountable for application security, user access governance, segregation of duties, controls design and testing, compliance, audit support, service levels, staffing, reporting, and continuous improvement. The position will build and operate a sustainable, risk-based S&C capability that protects Oceaneering’s enterprise applications while enabling efficient business operations.

Duties and Responsibilities

Operational Leadership and Service Delivery

• Own end-to-end delivery of the Security & Controls function across Oracle Fusion Cloud ERP and Costpoint ERP, including provisioning, access reviews, controls testing, incident and request resolution, audit support, and reporting.

• Define, publish, monitor, and continuously improve service levels and performance measures for access requests, security incidents, controls execution, and audit support.

• Manage the operating model, capacity plan, staffing mix, budget, priorities, risks, and delivery commitments for the S&C team.

• Ensure documented procedures, runbooks, escalation paths, cross-training, and business continuity coverage are maintained for critical S&C services.

Application Security and Access Governance

• Set direction for application security architecture and governance across Oracle Fusion Cloud ERP and Costpoint ERP, including role design, least privilege, privileged access, and segregation-of-duties standards.

• Govern role catalogs, personas, job-to-role mappings, approval workflows, sensitive access, and periodic user access certifications.

• Own segregation-of-duties and sensitive-access rulesets, risk ratings, mitigating controls, exception processes, and periodic reviews.

• Direct security remediation and role redesign activities, including resolution of inherited, custom, and cross-application access conflicts.

• Partner with Identity and Access Management, Cybersecurity, infrastructure, integration, functional, and business teams to ensure consistent joiner, mover, and leaver controls.

Controls, Automation, and Continuous Improvement

• Lead automation of access requests, approvals, segregation-of-duties checks, access certifications, controls testing, monitoring, evidence generation, and reporting.

• Advance the function from periodic and manual controls toward continuous, evidence-generating controls where practical and risk appropriate.

• Maintain a prioritized S&C roadmap with measurable improvements in control effectiveness, cycle time, quality, coverage, and effort.

• Assess ERP releases, enhancements, integrations, and configuration changes for security and controls impacts before production deployment.

Compliance, Audit, and Risk Management

• Serve as the senior S&C point of contact for internal and external auditors for Oracle Fusion Cloud ERP and Costpoint ERP application security and controls.

• Coordinate control walkthroughs, evidence, testing support, issue responses, and remediation through closure.

• Ensure control evidence is complete, accurate, timely, traceable, and retained in accordance with applicable requirements.

• Escalate residual risks with documented business impact, compensating controls, risk acceptance, accountable ownership, and target dates.

• Maintain alignment with applicable financial reporting, contractual, regulatory, cybersecurity, and internal control requirements.

License and Consumption Governance

• Maintain an evidenced view of access-driven license and consumption demand across supported ERP platforms.

• Govern dormant account reviews, unnecessary access removal, role rationalization, and the license impact of security design decisions.

• Partner with Procurement, Finance, and application owners to support renewals, true-ups, audits, and optimization opportunities.

People and Stakeholder Leadership

• Recruit, lead, develop, and retain a high-performing S&C team; establish objectives, accountability, succession plans, and development priorities.

• Coach managers and team leads while building broader capability across Oracle Fusion Cloud ERP, Costpoint ERP, controls, audit, and access governance.

• Build trusted relationships with business process owners, Finance, HR, Supply Chain, Government/Defense stakeholders, Internal Audit, external auditors, Cybersecurity, Compliance, Legal, and IT leaders.

• Translate technical security and controls issues into clear business risk, impact, options, and recommended decisions for leadership.